Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBEC1CA2C54C11EFAD0C46B6762E951A.roa
File: FBEC1CA2C54C11EFAD0C46B6762E951A.roa (raw, json)
Hash identifier: WFaApV0VpgoJ+6Ap+H2V/u5CZHKIcQOIWFj1qz0AhmI=
Subject key identifier: 80:DE:A8:88:E5:5A:C2:9E:1B:9B:B4:63:F0:49:D8:31:2D:2C:C2:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBEC1CA2C54C11EFAD0C46B6762E951A.roa
Signing time: Sat 28 Dec 2024 18:53:11 +0000
ROA not before: Sat 28 Dec 2024 18:53:07 +0000
ROA not after: Sun 12 Dec 2027 18:53:07 +0000
asID: 17561
IP address blocks: 154.209.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77035 (0x12ceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:53:07 2024 GMT
Not After : Dec 12 18:53:07 2027 GMT
Subject: CN=67704917-5085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:6e:7b:9c:2e:91:9f:3a:5c:80:ed:9a:f0:
0d:2b:84:4a:5c:fd:9a:d4:a3:e5:ef:3f:04:e5:df:
3b:e1:56:56:29:b7:6b:55:ce:ad:bf:5e:b2:e7:d1:
00:32:7b:3a:ee:93:8b:b6:27:db:14:4d:5c:07:7d:
99:de:c5:f2:8b:3e:34:97:52:e0:0c:fe:30:3a:c6:
26:79:3b:17:b9:ec:b7:81:ce:f1:4b:fe:45:77:2f:
93:fe:a5:ec:2c:df:3b:f6:cc:2b:5b:48:62:15:8b:
fc:01:d1:23:f6:41:9c:1c:60:35:9d:f9:d8:65:13:
56:df:dd:82:74:4e:9c:62:50:29:42:03:94:da:9b:
cb:06:16:33:84:2a:60:ae:22:a5:43:b8:6d:4c:86:
49:35:bc:ce:eb:50:2b:ce:b7:83:9a:6d:f4:ad:62:
b1:4f:1d:7d:14:ea:57:6b:57:5d:07:b5:a6:ad:87:
f2:91:b8:48:a8:96:1a:52:8b:5f:36:b9:03:92:3b:
91:2f:05:d0:a0:e8:15:b7:67:b4:3e:12:ae:7d:55:
df:c2:12:91:f5:2f:10:55:60:43:89:1d:c6:18:d4:
2e:2b:66:49:72:d7:85:ed:d9:fc:d8:1d:10:15:a0:
73:7f:e8:a8:be:cd:a0:ed:70:c4:5f:da:2f:cd:88:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DE:A8:88:E5:5A:C2:9E:1B:9B:B4:63:F0:49:D8:31:2D:2C:C2:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBEC1CA2C54C11EFAD0C46B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.90.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3d:82:78:5a:c6:51:22:53:d8:66:9a:59:23:ce:4b:6a:5e:
36:88:e6:96:d1:13:41:c4:b7:81:98:0c:30:ee:7d:ac:e2:48:
e3:28:a1:94:55:84:75:5f:39:e3:04:cb:46:fc:20:f5:32:ae:
ef:30:2f:35:ed:e5:d8:3c:c9:e5:40:c5:0d:e0:e3:27:f7:45:
cb:1b:d5:47:c1:18:b0:9f:d5:af:4e:b5:9a:6b:22:23:e0:48:
6f:48:2a:3e:b5:5b:f0:3b:8c:ff:84:08:70:7b:31:6d:bb:3b:
ca:8b:44:68:65:97:23:28:56:eb:fd:5b:97:8a:80:83:37:76:
bd:80:96:51:54:9f:37:1b:78:6b:8d:f9:92:e3:6d:1f:c6:12:
56:d2:11:d7:6f:88:5d:68:0e:f8:b4:d5:3b:71:05:e2:26:a4:
24:b4:3f:f1:63:72:e0:fd:d3:af:eb:b5:94:79:39:fa:ae:49:
89:b4:d5:51:50:c2:04:18:4a:6b:91:7e:0c:17:b6:d9:b2:35:
81:db:51:7a:91:74:41:f4:e3:7d:09:0c:73:51:78:d8:fd:e4:
95:ce:cd:db:28:f8:e7:2f:5a:78:ac:0e:d6:52:28:b5:50:7d:
d7:a7:cc:be:42:c1:19:74:ad:fc:87:a4:ee:58:72:19:2a:2b:
4b:52:67:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASzrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTg1MzA3WhcNMjcxMjEyMTg1MzA3WjAYMRYw
FAYDVQQDEw02NzcwNDkxNy01MDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2MZue5wukZ86XIDtmvANK4RKXP2a1KPl7z8E5d874VZWKbdrVc6tv16y
59EAMns67pOLtifbFE1cB32Z3sXyiz40l1LgDP4wOsYmeTsXuey3gc7xS/5Fdy+T
/qXsLN879swrW0hiFYv8AdEj9kGcHGA1nfnYZRNW392CdE6cYlApQgOU2pvLBhYz
hCpgriKlQ7htTIZJNbzO61ArzreDmm30rWKxTx19FOpXa1ddB7WmrYfykbhIqJYa
UotfNrkDkjuRLwXQoOgVt2e0PhKufVXfwhKR9S8QVWBDiR3GGNQuK2ZJcteF7dn8
2B0QFaBzf+iovs2g7XDEX9ovzYjHbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIDe
qIjlWsKeG5u0Y/BJ2DEtLMJMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQkVDMUNBMkM1NEMxMUVGQUQwQzQ2QjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtFaMA0GCSqGSIb3DQEB
CwUAA4IBAQATPYJ4WsZRIlPYZppZI85Lal42iOaW0RNBxLeBmAww7n2s4kjjKKGU
VYR1XznjBMtG/CD1Mq7vMC817eXYPMnlQMUN4OMn90XLG9VHwRiwn9WvTrWaayIj
4EhvSCo+tVvwO4z/hAhwezFtuzvKi0RoZZcjKFbr/VuXioCDN3a9gJZRVJ83G3hr
jfmS420fxhJW0hHXb4hdaA74tNU7cQXiJqQktD/xY3Lg/dOv67WUeTn6rkmJtNVR
UMIEGEprkX4MF7bZsjWB21F6kXRB9ON9CQxzUXjY/eSVzs3bKPjnL1p4rA7WUii1
UH3Xp8y+QsEZdK38h6TuWHIZKitLUmcq
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:27 2025 by rpki-client